If at the profile level, ‘Password Never Expires’ has been checked but at Setup > Security
Controls > Password Policies if it is specified that password expires in 30 days, then which
of the two would be true for users of that profile?

Answer: ‘Password Never Expires’ specified at profile level would hold true.